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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS. 

WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .1 36(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)[3 Responsive to communication(s) filed on 15 February 2006 . 
2a)£0 This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quay/e, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) £3 Claim(s) 1-26 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) . * is/are allowed. 

6) K Claim(s) 1-26 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)D All b)Q Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2.D Certified copies of the priority documents have been received in Application No. . 

3-D Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 

1 . This Office Action is responding to the Amendment received on 02/1 5/06. 

2. Claims 1-26 are pending. Claims 1, 11, and 21 are amended. 

Claim Rejections - 35 USC § 102 

3. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 1 02 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on 
sale in this country, more than one year prior to the date of application for patent in the United States. 

4. Claims 1-24 are rejected under 35 U.S.C. 102(b) as being anticipated by 
Hillhouse, US Patent No. 6052468, (Cited in PTO 892 dated 10/21/04). 

5. As per claims 1 and 1 1 : 

Hillhouse discloses "a method for use in a computer capable of supporting multiple 
authentication mechanisms (Col 6 lines 25-35), the method comprising: 

generating at least one indicator that identifies a user, and is associated with and 
identifies at least one authentication mechanism" in (Col 8 lines 27-43, Col 1 lines 35-45, and 
"the indicator is the data indicative of a user authorization method, which identifies a user and a 
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mechanism of authentication of the user according to the user prior registration of the 
authentication method); and 

"controlling access to at least one resource based on the indicator' in (Col 5 lines 32-38). 
Hillhouse further discloses an authentication system of identifying a user's authentication 
information against registered authentication information of the user in (Col 1 lines 35-45, Col 8 
lines 27-43). 

6. As per claims 2, 12, and 22: 

Hillhouse discloses the method as recited in claims 1,11, and 21, wherein generating the 
indicator further includes receiving inputs, providing the inputs to the authentication mechanism, 
and causing the authentication mechanism to generate at least one security identifier (SID) that 
identifies the authentication mechanism (Col 8 lines 27-43). 

7. As per claims 3, 13, and 23: 

Hillhouse discloses the method as recited in claims 1,11, and 2 1 , wherein generating the 
indicator further includes identifying within the indicator at least one characteristic associated 
with the authentication mechanism (Col 8 lines 27-43). 
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8. As per claims 4, 14, and 24: 

Hillhouse discloses the method as recited in claims 3, 13, and 23, wherein the at least one 
characteristic associated with the authentication mechanism includes a measure of strength of the 
authentication mechanism (Col 8 lines 44-67). 

9. As per claims 5, 15, and 25: 

Hillhouse discloses the method as recited in claims 4, 14, and 24, wherein the measure of 
strength of the authentication mechanism identifies a length of an encryption key employed by 
the authentication mechanism (Col 8 lines 44-67). 

10. As per claims 6, and 16: 

Hillhouse discloses the method as recited in claims 1,11, and 21, wherein controlling access to 
the resource based on the indicator further includes comparing the indicator to at least one access 
control list having at least one access control entry therein (Col 7 lines 15-18). 

11. As per claims 7, and 17: 

Hillhouse discloses the method as recited in claims 6 and 16, wherein if the access control entry 
operatively specifies that the at least one authentication mechanism is permitted to access the 
resource, then access to the at least one resource is allowed to proceed (Col 7 lines 15-21). 
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12. As per claims 8, 18: 

Hillhouse discloses the method as recited in claims 6 and 16, wherein if the access control entry 
operatively specifies that the at least one authentication mechanism is not permitted to access the 
resource, then access to the at least one resource is not allowed to proceed (Col 5 lines 52-60). 

13. As per claims 9, and 19: 

Hillhouse discloses the method as recited in claims 6 and 16, wherein if the access control entry 
does not operatively specify that the at least one authentication mechanism is permitted to access 
the resource, then access to the at least one resource is not allowed to proceed (Col 5 lines 52- 
60). 

14. As per claims 10, 20, and 26: 

Hillhouse discloses the method as recited in claims 1,11, and 21, wherein the indicator includes 
a security token. 

15. As per claims 21: 

Hillhouse discloses an apparatus comprising: 

at least one authentication mechanism configured to generate at least one 
indicator that identifies a user, and identifies the authentication mechanism (Col 8 lines 
27-43, Col 1 lines 35-45, and "the indicator is the data indicative of a user authorization 
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method, which identifies a user and a mechanism of authentication of the user 
according to the user prior registration of the authentication method); 
an access control list (Col 7 lines 15-18); 
at least one access controlled resource (Col 8 lines 1-15); and 
logic operatively configured to compare the indicator with the access control list and 
selectively control the user's access to the resource based on the indicator (Col 7 lines 1-26). 
Hillhouse further discloses an authentication system of identifying a user's authentication 
information against registered authentication information of the user in (Col 1 lines 35-45). 

Response to Arguments 

16. Applicant's arguments filed 02/15/06 have been fully considered but they are not 
persuasive. 

17. Applicant amended claims 1,11, and 21 to over come Hillhouse's teaching. 
Applicant argues that Hillhouse does not teach of the indicator that identifies a user and 
the authentication method on page 10-12 of the remark. Examiner traverses Applicant's 
arguement. The indicator that is identifies a user and the authentication method is the 
data indicative of a user authorization method (Col 8 lines 27-43, Col 1 lines 35-45), 
which identifies a user and a mechanism of authentication of the user according to the 
user prior registration of the authentication method. 

Conclusion 
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1 8. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 . 1 36(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end" of the THREE-MONTH shortened statutory period, then the shortened statutory, period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the mailing 
date of this final action. 

19. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Linh LD Son whose telephone number is 571-272-3856. 
The examiner can normally be reached on 9-6 (M-F). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on 571-272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 

Lirih LD Son 



Examiner 
Art Unit 2135 




